server {
  listen 443 ssl;
  server_name registry.domain.com;

  client_max_body_size 0;
  chunked_transfer_encoding on;
  proxy_buffering off;
  proxy_request_buffering off;
  proxy_http_version 1.1;

  location / {
    proxy_set_header Host                $http_host;
    proxy_set_header X-Real-IP           $remote_addr;
    proxy_set_header X-Forwarded-Ssl     on;
    proxy_set_header X-Forwarded-For     $proxy_add_x_forwarded_for;
    proxy_set_header X-Forwarded-Proto   $scheme;

    proxy_pass http://192.168.88.211:8080;
  }

  ssl_protocols	SSLv3 TLSv1.2 TLSv1.3;
  ssl_certificate	/ssl/domain.com.crt;
  ssl_certificate_key	/ssl/domain.com.key;
  ssl_dhparam		/ssl/dhparam.pem;
  #add_header Strict-Transport-Security "max-age=31536000; includeSubDomains" always; #hsts
}